Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File:                     Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier:          8YVMJ/bkpRDG7gqMTTn4rVh+X37iu75Rl0PDhEPRMo8=
Subject key identifier:   02:A0:86:69:FB:A4:7D:4D:E8:F9:B3:20:A7:D6:8B:F0:33:3B:0D:4C
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer:       /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial:       019355081026B29A06EBF3072BED251B32E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number:          1374
Signing time:             Fri 22 Nov 2024 18:00:11 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:11 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:11 +0000
Files and hashes:         1: 1VQTYl2uBy4EUzDDX0f3GybEi10.roa (hash: wQxV8joorrzUUTeTBueiVG8bwLWWwoGHD5svX2/8GYE=)
                          2: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: Vy8D5NnDLYHaBojMPYNMGz1GsWQRC6JODDQFrjkusjk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:10:26:b2:9a:06:eb:f3:07:2b:ed:25:1b:32:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
        Validity
            Not Before: Nov 22 18:00:11 2024 GMT
            Not After : Nov 23 18:00:11 2024 GMT
        Subject: CN=02a08669fba47d4de8f9b320a7d68bf0333b0d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:44:c1:06:09:20:04:c6:da:7b:41:2f:d4:fc:
                    a3:1c:75:e8:97:08:18:f0:7a:33:08:f0:e9:e5:3c:
                    4a:71:d7:b5:55:47:cf:99:fb:a2:ca:21:db:b8:2a:
                    3c:9b:5b:bd:91:4f:ad:8a:92:f0:3a:07:29:4a:f2:
                    c9:0c:c1:88:86:89:38:47:ab:d3:01:a4:39:dc:ca:
                    14:ec:b4:87:f2:12:f1:43:b9:cd:1b:77:3b:58:2f:
                    51:72:4d:ca:bd:fb:93:d9:de:a9:2d:f5:c2:d0:b3:
                    a0:73:9e:e1:50:ba:07:c8:92:6c:41:7e:79:16:bb:
                    6c:b6:da:be:a3:eb:49:99:0a:ed:3d:23:7d:c0:8c:
                    48:d3:1b:f5:b5:73:f7:a4:50:f8:4d:8e:29:cc:6c:
                    2e:bc:69:0a:9e:99:1e:f7:d6:4a:d4:4b:d9:26:6b:
                    84:83:a6:20:89:70:15:f4:6d:e9:1f:f4:2d:e5:04:
                    81:ac:f2:f7:23:3b:b1:29:0e:56:f4:5a:ac:1c:93:
                    99:f0:ac:f2:cd:db:0a:73:9f:10:f4:dc:c7:26:b7:
                    aa:4b:95:63:8d:bc:a2:6d:63:b2:10:11:44:2b:8f:
                    d4:8b:12:9d:71:87:72:50:62:c3:dc:ce:af:17:a0:
                    75:b1:d5:af:53:32:89:04:53:30:a3:2d:0a:1b:bc:
                    b9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A0:86:69:FB:A4:7D:4D:E8:F9:B3:20:A7:D6:8B:F0:33:3B:0D:4C
            X509v3 Authority Key Identifier:
                keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ee:7c:82:a2:30:08:2f:74:c1:40:3f:32:4e:40:52:ec:15:
         d4:f3:0a:af:e5:a7:f6:6a:9d:89:2f:7b:e6:51:39:f9:81:bc:
         24:a8:6d:5f:76:47:7f:84:f4:aa:98:ed:d2:b9:58:70:e5:b0:
         d7:41:82:f4:c6:70:4b:3f:be:35:3f:5e:24:c9:ca:af:69:14:
         c9:46:6f:d1:76:b3:58:04:28:24:c1:d8:e3:a2:a0:a3:4f:c2:
         22:2e:7f:2f:03:cc:90:e9:4a:a4:d8:39:0c:ef:da:56:3d:03:
         64:0e:74:ae:af:dc:19:a4:f1:14:30:0e:ce:ca:3d:0a:64:4e:
         24:9e:47:f2:7c:47:9b:3c:48:77:82:c0:ad:af:bb:d4:2a:7f:
         9d:1a:69:9a:f6:4c:f5:ea:90:95:44:28:50:a1:55:5c:d7:d0:
         7c:4a:11:61:df:c0:24:81:53:bf:7d:bd:47:8f:eb:51:12:74:
         b5:7a:21:6a:04:1d:cc:96:a5:44:75:9e:41:29:0f:ee:4d:ba:
         ba:f9:b1:d8:71:02:e0:ad:df:60:f3:15:9b:eb:5e:a0:ad:4b:
         ca:4d:26:a5:f2:4a:d5:89:1f:0a:38:d0:f8:58:66:1a:fe:a7:
         94:8b:3f:24:d4:23:24:be:da:fc:2f:a6:e0:2a:15:b1:fc:1f:
         06:c7:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:35:02 2024 by rpki-client on console-fra.rpki-client.org